Currently, SlideX is in active development. Security updates are provided for the latest version only.
| Version | Supported |
|---|---|
| 1.x.x | ✅ |
| < 1.0 | ❌ |
If you discover a security vulnerability within SlideX, please send an email to [INSERT EMAIL ADDRESS] with the subject line "SlideX Security Vulnerability Report".
Please include the following information in your report:
- Description of the vulnerability
- Steps to reproduce the vulnerability
- Potential impact of the vulnerability
- Any possible mitigations you've identified
We ask that you give us a reasonable amount of time to address the vulnerability before disclosing it publicly.
SlideX follows several security best practices:
- Authentication: Uses Clerk for secure user authentication
- Data Storage: Firebase Firestore with proper security rules
- Environment Variables: Sensitive keys stored in environment variables
- Dependency Management: Regular updates to address known vulnerabilities
- Input Validation: Proper validation of user inputs
- Secure Communication: HTTPS encryption for all network communications
If you're contributing to SlideX, please follow these security best practices:
- Never commit sensitive information (API keys, passwords, etc.) to the repository
- Use environment variables for configuration
- Validate and sanitize all user inputs
- Keep dependencies up to date
- Follow the principle of least privilege
- Review security documentation before implementing new features